Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9f258285-f92b-3a29-9f38-6e2c05b27abf.roa
File:                     9f258285-f92b-3a29-9f38-6e2c05b27abf.roa (raw, json)
Hash identifier:          vL3qnn+5M1zO/Ho5+tn722gO0yfucooSQKSJPTacnUo=
Subject key identifier:   3D:F1:51:64:D1:DB:52:AB:F4:4C:AB:E0:C2:27:96:CA:CF:86:00:C4
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584D1F4A6EE67B86DDC480386D80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9f258285-f92b-3a29-9f38-6e2c05b27abf.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        157.5.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:6e:e6:7b:86:dd:c4:80:38:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=a44fd2e8-d7e8-4b1b-b2b2-d4439cea7431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2c:54:ef:d9:46:de:ad:d8:b6:e5:e7:1e:72:
                    ac:5c:9c:b3:b2:d9:09:36:44:b3:00:c8:96:5a:2b:
                    11:cc:60:6d:ac:55:fc:3f:22:43:03:ed:cb:3f:6b:
                    a4:6e:e6:f3:c2:a5:ad:33:9e:ea:71:b9:89:44:f2:
                    5f:36:63:75:9b:45:1a:8e:ac:ea:aa:6e:55:bc:d1:
                    b1:91:65:6f:32:68:ec:db:4e:81:42:be:83:50:a9:
                    28:9f:6d:75:d6:07:37:8e:00:33:2c:6e:5b:42:41:
                    47:7f:03:86:3c:90:1d:f2:c2:f0:74:84:b9:cc:e7:
                    04:db:2a:11:f1:d5:bf:e6:1e:8e:57:6d:ca:14:a7:
                    15:67:13:40:5b:62:b5:f9:f1:3c:a1:2d:fe:13:34:
                    a3:a7:6d:2b:d5:63:ff:ca:72:0e:23:a3:13:0c:12:
                    02:1b:a7:28:f8:a0:33:49:90:86:23:30:07:f8:74:
                    3e:02:22:24:f8:cc:88:98:ff:ad:97:40:44:b6:5a:
                    a2:dd:8d:7c:7a:d2:ed:b5:37:c2:15:3f:18:b8:80:
                    f8:cb:72:92:c4:d4:16:28:8f:80:f0:09:67:01:0e:
                    c6:cc:c5:72:ce:41:59:20:b8:f3:24:51:de:29:cf:
                    ca:7b:56:15:ae:40:15:a3:78:7c:9f:ee:5c:2b:13:
                    ce:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F1:51:64:D1:DB:52:AB:F4:4C:AB:E0:C2:27:96:CA:CF:86:00:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9f258285-f92b-3a29-9f38-6e2c05b27abf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:f9:bd:e6:d1:d6:d5:93:2d:11:00:7e:99:0b:01:4e:c2:98:
         47:8d:0b:eb:ab:8e:fc:b8:b8:8a:a2:4b:a1:f6:d8:aa:f8:b5:
         7c:65:6c:a4:ab:3c:7f:e2:f2:ab:7c:e6:ad:68:fd:ff:7d:70:
         78:ad:62:9a:11:9c:29:ef:09:28:f8:e7:54:ed:ee:b6:06:96:
         cf:d7:ef:f0:9e:91:3e:fa:31:d7:17:b5:b6:49:b7:9f:78:38:
         59:05:61:3a:07:f5:c0:79:e1:73:04:61:ef:2f:e8:4b:51:cf:
         17:b1:06:bf:08:f8:99:4d:7a:be:ef:77:1e:60:5b:2f:67:44:
         4f:40:ec:c6:31:6d:78:6b:13:bd:b5:14:85:e9:35:d1:03:e4:
         48:bf:1d:98:d7:19:b4:cc:5a:b9:44:33:c9:40:d3:4a:71:2a:
         a8:c2:10:7e:b4:23:ec:71:b2:12:3a:f3:70:b2:b4:c5:23:45:
         22:e8:b8:8f:45:c5:5f:1e:b5:e5:dc:a9:ad:f8:0a:fc:fa:43:
         ec:c6:4b:c4:2b:4e:e4:52:7c:f5:4d:15:66:4d:44:1e:cf:35:
         18:1b:90:bb:0b:58:88:17:a3:a2:14:c1:fa:67:5e:2a:5e:a0:
         c8:4e:21:c7:26:3c:7a:b9:b6:be:d2:d0:0d:8d:38:fc:ce:b5:
         95:a0:13:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:29:11 2026 by rpki-client